If you are building coding agents in Vercel Sandbox, I made a small helper called sandbox-policy-builder. It lets you write networkPolicy rules by service name instead of hand-writing raw domains and header transforms. Supports: codex, openai, gemini, claude, github, aiGateway